Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- /*
- ebp+0x10: arg1
- ebp+0xC: alignmentPadding
- ebp+0x8: arg0
- ebp+0x4: __return_address
- ebp+0x0: __old_base_pointer
- ebp-0x4:
- */
- int osTestBackdoorATI(int arg0, DWORD* arg1){
- //prologue
- //push ebx
- //esp -= 0x74
- //load arg0 into edx
- //do damage to ebx with __i686.get_pc_thunk.bx
- //load arg1 into ecx
- if(arg0 == 1){//goto osTestBackdoorATI+96;
- return (unsigned)(unsigned char)
- osMemStateDifferent(arg1[0], arg1[1]);
- }else if(arg0 == 2){//goto osTestBackdoorATI+72;
- return (unsigned)(unsigned char)
- osMemStateDumpAllObjectsSince(arg1[0]);
- }else if(arg0 == 0){//goto osTestBackdoorATI+48;
- return (unsigned)(unsigned char)
- osMemStateCheckPoint(arg1[0]);
- }else{
- return 0;
- }
- //esp += 0x74
- //pop ebx REPLICATED BEFORE EACH RETURN STATEMENT
- //epilogue
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement